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This listing of claims will replace all prior versions, and listings, of claims in the application. 



Listing of Claims: 



1. (Currently Amended) A method of storing a state store having state 
information therein on a computing device, the method comprising: 

obtaining information from the computing device at least nearly substantially unique 
with regard to the computing device, the obtained information being generally non changing 
and consistently obtainable and being selected from a group consisting of a hardware 
identification (HWID) generated for the computing device based on one or more 
identifications of hardware of the computing device, and a specific time associated with the 
computing device; 

determining generating a specific number [[x]] of locations on the computing device 
at which at least a portion of the state store is to be stored at; 

generating [[x]] the specific number of pseudo-random file names and [[x]] the 
specific number corresponding paths based at least in part on the obtained information by 
applying a one-way function to data including the obtained information and employing a 
resulting output of the function to define the file named and the paths, whereby wherein the 
generated file names and corresponding paths are likewise at least nearly substantially unique 
to the computing device; 

pairing respective ones of the [[x]] specific number of generated file names and the 
[[x]] specific number of generated paths to form the x locations on the computing device ; and 

storing the state store on the computing device according to the [[x]] specific number 
of generated locations on the computing device . 



2. (Canceled) 



3. (Original) The method of claim 1 comprising obtaining information 
specific to the computing device comprising an install time of an operating system thereof. 
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4. (Currently Amended) The method of claim 1 comprising obtaining 
information specific to a current period of time, whereby wherein the state store is stored 
according to a location that varies according to such current period of time 



5. (Currently Amended) The method of claim 1 comprising determining the 
specific number [[x]] of locations as a number n of parts in which the state store is to be 
divided times a number m of copies of each part that are to be stored. 



6. (Currently Amended) The method of claim 1 comprising generating [[x]] the 
specific number of pseudo-random file names, each having a pseudo-random name length. 



7. (Currently Amended) The method of claim 1 comprising generating [[x]] the 
specific number of paths, each path comprising one of a plurality of levels of an operating 
system directory path on the computing device. 

8. (Currently Amended) The method of claim 1 comprising generating [[x]] the 
specific number of paths, each path comprising one of a plurality of levels of a registry path 
on the computing device. 

9. (Currently Amended) The method of claim 1 wherein storing the state store 
according to the [[x]] the specific number of generated locations comprises: 

protecting the state store by performing at least one of: 

signing the state store to produce a signature and appending the signature to the state 
store; and 

encrypting the state store to produce an encrypted state store; 
dividing the state store into n parts; 

saving each of the n parts m times according to the specific number of formed 
locations, wherein the specific number [[x]] = n times m formed locations . 



Page 3 of 17 



DOCKET NO.: MSFT-2737 / 304771.01 

Application No.: 10/706,018 

Office Action Dated: December 10, 2007 



PATENT 

REPLY FILED UNDER EXPEDITED 
PROCEDURE PURSUANT TO 
37 CFR § 1.116 



10. (Currently Amended) The method of claim 1 wherein storing the state store 
according to the [[x]] the specific number of generated locations comprises: 
dividing the state store into n parts; 

protecting the state store by signing at least one of the n parts of the state store to 
produce a signature and appending the signature to the part; and 

saving each of the n parts according to the [[x]] the specific number of formed 



1 1 . (Currently Amended) The method of claim 1 further comprising retrieving the 
stored state store, the retrieving comprising: 

obtaining the information at least nearly substantially unique to the computing device; 

determining the specific number [[x]] of locations at which at least a portion of the 
state store is stored at; 

generating the [[x]] specific number of pseudo-random file names and the [[x]] 
specific number of corresponding paths based at least in part on the obtained information; 

pairing the [[x]] specific number of generated file names and the [[x]] specific number 
of generated paths to form the x locations; and 

retrieving the state store from the [[x]] specific number of generated locations. 

12. (Currently Amended) The method of claim 11 wherein the state store has been 
divided into n parts and each of the n parts has been saved according to the [[x]] specific 
number of formed locations, and wherein retrieving the stored state further comprises: 

retrieving the n parts from the [[x]] specific number of locations; 
reconstituting the state store from the retrieved n parts thereof; 
if the reconstituted state store is encrypted, decrypting same; and 

if the reconstituted state store is signed to produce a signature, verifying the signature. 

13. (Currently Amended) The method of claim 12 wherein the state store has been 
divided into n parts and each of the n parts has been saved m times according to the [[x]] 
specific number of formed locations, and wherein retrieving the stored state comprises 
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reconstituting m copies of the state store from the retrieved n parts thereof, and further 
comprises randomly selecting one of the m reconstituted copies. 



14. (Currently Amended) The method of claim 1 wherein each file name has a 
length and wherein generating [[x]] the specific number of pseudo-random file names based 
at least in part on the obtained information comprises: 

hashing data including the obtained information to produce a first hash comprising a 
string of numbers; 

for each file name length, applying a pre-defined serial portion of the first hash to a 
function to result in the file name length; and 
for each Nth file name: 

performing a predetermined modification to the Nth hash; 

hashing the modified Nth hash to produce an (N+l)th hash comprising a string of 
numbers, whereby wherein the first hash is employed to produce a second hash for the first 
file name, the second hash is employed to produce a third hash for the second name, etc.; and 

for each file name character of the Nth file name, applying a pre-defined serial portion 
of the (N+l)th hash to a function to result in the file name character. 



15. (Original) The method of claim 14 wherein each file name length has a 
preset minimum and maximum, and wherein applying the pre-defined serial portion of the 
first hash to a function to result in the file name length comprises applying the pre-defined 
serial portion of the first hash to the modulo function: 



Length = [ serial portion mod ( maximum - minimum ) ] -hminimum. 



16. (Original) The method of claim 14 wherein applying the pre-defined serial 
portion of the (N+l)th hash to a function to result in the file name character comprises 
applying the pre-defined serial portion of the first hash to a conversion table predefined for 
the computing device. 
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17. (Original) The method of claim 14 wherein the modification comprises at 
least one of a bit shift, a reverse ordering, and a swapping. 



18. (Original) The method of claim 1 wherein each path comprises one of a 
plurality of levels of an operating system directory path on the computing device, and 
wherein generating x paths based at least in part on the obtained information comprises: 

hashing data including or based on the obtained information to produce a path hash 
comprising a string of numbers; 

for each path, applying a pre-defined serial portion of the path hash to a function to 
result in a level for the path. 



19. (Original) The method of claim 18 wherein each path level has a preset 
minimum and maximum, and wherein applying the pre-defined serial portion of the path hash 
to a function to result in the level for the path comprises applying the pre-defined serial 
portion of the path hash to the modulo function: 



Level = [serial portion value mod ( maximum - minimum ) ] -hminimum. 



20. (Currently Amended) The method of claim 1 comprising defining successive 
periods of time, and for each successive period of time: 

obtaining information at least nearly substantially unique to the computing device; 

determining a number x of locations at which at least a portion of the state store is to 
be stored at; 

generating [[x]] the specific number of pseudo-random file names and x 
corresponding paths based at least in part on the obtained information and based at least in 
part on indicia relevant to the period of time, whereby wherein the generated file names and 
corresponding paths are likewise at least nearly substantially unique to the computing device 
and unique to the period of time; 

pairing the [[x]] specific number of generated file names and the [[x]] specific number 
of generated paths to form the x locations; and 
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storing the state store according to the [[x]] specific number of generated locations, 
whereby wherein the state store is moved during each successive period of time. 



21. (Currently Amended) The method of claim 1 further comprising: 

obtaining alternate information relevant to the computing device; 

generating at least one pseudo-random file name and at least one corresponding path 
based at least in part on the alternate information and pairing same to form at least one 
alternate location; and 

storing the obtained information as original information according to the at least one 
generated alternate location, whereby wherein if the obtained information changes on the 
computing device, such changed information cannot be employed to retrieve the state store 
but the alternate information can be employed to retrieve the original information and the 
original information can be employed to retrieve the state store. 



22. (Currently Amended) A computer-readable storage medium having stored 
thereon computer executable instructions for performing a method of storing a state store 
having state information therein on a computing device, the method comprising: 

obtaining information from the computing device at least nearly substantially unique 
with regard to the computing device, the obtained information being generally non changing 
and consistently obtainable and being selected from a group consisting of a hardware 
identification (HWID) generated for the computing device based on one or more 
identifications of hardware of the computing device, and a specific time associated with the 
computing device; 

determining generating a specific number [[x]] of locations on the computing device 
at which at least a portion of the state store is to be stored at; 

generating [[x]] the specific number of pseudo-random file names and [[x]] the 
specific number of corresponding paths based at least in part on the obtained information by 
applying a one-way function to data including the obtained information and employing a 
resulting output of the function to define the file named and the paths, whereby wherein the 
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generated file names and corresponding paths are likewise at least nearly substantially unique 
to the computing device; 

pairing respective ones of the [[x]] specific number of generated file names and the 
[[x]] specific number of generated paths to form the [[x]] the specific number of locations on 
the computing device ; and 

storing the state store on the computing device according to the [[x]] specific number 
of generated locations on the computing device . 

23. (Canceled) 

24. (Original) The medium of claim 22 wherein the method comprises 
obtaining information specific to the computing device comprising an install time of an 
operating system thereof. 

25. (Currently Amended) The medium of claim 22 wherein the method comprises 
obtaining information specific to a current period of time, whereby wherein the state store is 
stored according to a location that varies according to such current period of time 

26. (Currently Amended) The medium of claim 22 wherein the method comprises 
determining the specific number [[x]] of locations as a number n of parts in which the state 
store is to be divided times a number m of copies of each part that are to be stored. 

27. (Currently Amended) The medium of claim 22 wherein the method comprises 
generating [[x]] the specific number of pseudo-random file names, each having a pseudo- 
random name length. 

28. (Currently Amended) The medium of claim 22 wherein the method comprises 
generating [[x]] the specific number of paths, each path comprising one of a plurality of 
levels of an operating system directory path on the computing device. 
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29. (Currently Amended) The medium of claim 22 wherein the method comprises 
generating [[x]] the specific number of paths, each path comprising one of a plurality of 
levels of a registry path on the computing device. 

30. (Currently Amended) The medium of claim 22 wherein storing the state store 
according to the [[x]] specific number of generated locations comprises: 

protecting the state store by performing at least one of: 

signing the state store to produce a signature and appending the signature to the state 
store; and 

encrypting the state store to produce an encrypted state store; 
dividing the state store into n parts; 

saving each of the n parts m times according to the specific number of formed 
locations, wherein the specific number IT xll = n times m formed locations . 

31. (Currently Amended) The medium of claim 22 wherein storing the state store 
according to the x generated locations comprises: 

dividing the state store into n parts; 

protecting the state store by signing at least one of the n parts of the state store to 
produce a signature and appending the signature to the part; and 

saving each of the n parts according to the [[x]] specific number of formed locations. 

32. (Currently Amended) The medium of claim 22 wherein the method further 
comprises retrieving the stored state store, the retrieving comprising: 

obtaining the information at least nearly substantially unique to the computing device; 

determining the specific number [[x]] of locations at which at least a portion of the 
state store is stored at; 

generating the [[x]] specific number of pseudo-random file names and the [[x]] 
specific number of corresponding paths based at least in part on the obtained information; 

pairing the [[x]] specific number of generated file names and the [[x]] specific number 
of generated paths to form the [[x]] specific number of locations; and 
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retrieving the state store from the [[x]] specific number of generated locations. 

33. (Original) The medium of claim 32 wherein the state store has been 
divided into n parts and each of the n parts has been saved according to the [[x]] specific 
number of formed locations, and wherein retrieving the stored state further comprises: 

retrieving the n parts from the [[x]] specific number of locations; 

reconstituting the state store from the retrieved n parts thereof; 

if the reconstituted state store is encrypted, decrypting same; and 

if the reconstituted state store is signed to produce a signature, verifying the signature. 

34. (Currently Amended) The medium of claim [[32]] 33 wherein the state store 
has been divided into n parts and each of the n parts has been saved m times according to the 
[[x]] specific number of formed locations, and wherein retrieving the stored state comprises 
reconstituting m copies of the state store from the retrieved n parts thereof, and further 
comprises randomly selecting one of the m reconstituted copies. 

35. (Currently Amended) The medium of claim 22 wherein each file name has a 
length and wherein generating [[x]] the specific number of pseudo-random file names based 
at least in part on the obtained information comprises: 

hashing data including the obtained information to produce a first hash comprising a 
string of numbers; 

for each file name length, applying a pre-defined serial portion of the first hash to a 
function to result in the file name length; and 
for each Nth file name: 

performing a predetermined modification to the Nth hash; 

hashing the modified Nth hash to produce an (N-hl)th hash comprising a string of 
numbers, whereby wherein the first hash is employed to produce a second hash for the first 
file name, the second hash is employed to produce a third hash for the second name, etc.; and 

for each file name character of the Nth file name, applying a pre-defined serial portion 
of the (N+l)th hash to a function to result in the file name character. 
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36. (Original) The medium of claim 35 wherein each file name length has a 
preset minimum and maximum, and wherein applying the pre-defined serial portion of the 
first hash to a function to result in the file name length comprises applying the pre-defined 
serial portion of the first hash to the modulo function: 

Length = [ serial portion mod ( maximum - minimum ) ] +minimum. 

37. (Original) The medium of claim 35 wherein applying the pre-defined 
serial portion of the (N+l)th hash to a function to result in the file name character comprises 
applying the pre-defined serial portion of the first hash to a conversion table predefined for 
the computing device. 

38. (Original) The medium of claim 35 wherein the modification comprises at 
least one of a bit shift, a reverse ordering, and a swapping. 

39. (Original) The medium of claim 22 wherein each path comprises one of a 
plurality of levels of an operating system directory path on the computing device, and 
wherein generating x paths based at least in part on the obtained information comprises: 

hashing data including or based on the obtained information to produce a path hash 
comprising a string of numbers; 

for each path, applying a pre-defined serial portion of the path hash to a function to 
result in a level for the path. 

40. (Original) The medium of claim 39 wherein each path level has a preset 
minimum and maximum, and wherein applying the pre-defined serial portion of the path hash 
to a function to result in the level for the path comprises applying the pre-defined serial 
portion of the path hash to the modulo function: 
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Level = [serial portion value mod ( maximum - minimum ) ] +minimum. 

41. (Currently Amended) The medium of claim 22 wherein the method comprises 
defining successive periods of time, and for each successive period of time: 

obtaining information at least nearly substantially unique to the computing device; 

determining [[a]] the specific number [[x]] of locations at which at least a portion of 
the state store is to be stored at; 

generating [[x]] the specific number of pseudo-random file names and [[x]] the 
specific number of corresponding paths based at least in part on the obtained information and 
based at least in part on indicia relevant to the period of time, whereby wherein the generated 
file names and corresponding paths are likewise at least nearly substantially unique to the 
computing device and unique to the period of time; 

pairing the [[x]] specific number of generated file names and the [[x]] specific number 
of generated paths to form the x locations; and 

storing the state store according to the [[x]] specific number of generated locations, 
whereby wherein the state store is moved during each successive period of time. 

42. (Currently Amended) The medium of claim 22 wherein the method further 
comprises: 

obtaining alternate information relevant to the computing device; 

generating at least one pseudo-random file name and at least one corresponding path 
based at least in part on the alternate information and pairing same to form at least one 
alternate location; and 

storing the obtained information as original information according to the at least one 
generated alternate location, whereby wherein if the obtained information changes on the 
computing device, such changed information cannot be employed to retrieve the state store 
but the alternate information can be employed to retrieve the original information and the 
original information can be employed to retrieve the state store. 
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